@frontmcp/plugin-skilled-openapi 1.5.0 → 1.5.2

package/esm/index.mjs

@@ -15,12 +15,12 @@ import {
   createBundleSource
 } from "@frontmcp/adapters/skills";
 import {
+  buildSkillsCatalogSummary,
   DynamicPlugin,
   FrontMcpLogger,
   ListToolsHook,
   Plugin,
-  ScopeEntry as ScopeEntry3,
-  buildSkillsCatalogSummary
+  ScopeEntry as ScopeEntry3
 } from "@frontmcp/sdk";
 
 // plugins/plugin-skilled-openapi/src/executor/credential-resolver.ts
@@ -350,6 +350,78 @@ var BundleSyncService = class {
   logger;
   operationToolFactory;
   skillUnregisterByBundleId = /* @__PURE__ */ new Map();
+  /** The configured bundle source; wired by the DI factory via {@link attachSource}. */
+  source;
+  readyPromise;
+  /**
+   * Wired by the plugin's DI factory. Stores the bundle source so {@link
+   * ensureReady} can start it and await the first apply lazily, inside the
+   * request that needs the catalog. Does NOT start the source — see the context
+   * note on {@link bootstrap}.
+   */
+  attachSource(source) {
+    this.source = source;
+  }
+  /**
+   * Ensure the source has started and its FIRST bundle has been applied, so
+   * `scope.skills` and the hidden-op registry are populated before a meta-tool
+   * (search_skill / load_skill / run_workflow) reads them. Memoized — the
+   * underlying start + apply runs at most once per service instance.
+   */
+  async ensureReady() {
+    if (!this.source) return;
+    this.readyPromise ??= this.bootstrap(this.source);
+    return this.readyPromise;
+  }
+  /**
+   * Start the source and await its FIRST bundle apply.
+   *
+   * CRITICAL — every promise here (the `apply()`, the `firstApply` latch, and
+   * the `onChange` wiring) is created inside the FIRST caller's context, which
+   * is a request context (the meta-tools / list-tools hook call `ensureReady()`
+   * while handling a request). On a stateless V8-isolate runtime (Cloudflare
+   * Workers) this is mandatory two ways over:
+   *   1. workerd cancels promise continuations that cross a request boundary, so
+   *      a `firstApply` created in the scope-init/factory context would never
+   *      resolve when awaited from a later request — it must be created here.
+   *   2. There is no background event loop, so a deferred/fire-and-forget apply
+   *      (the old `setImmediate(source.start())`) can never complete after the
+   *      response is sent — the awaiting tool drives it to completion inline.
+   * A failed first sync is swallowed (logged) so it degrades to "no skills"
+   * instead of hanging or 500-ing every call.
+   */
+  async bootstrap(source) {
+    let resolveFirst;
+    let firstSettled = false;
+    const firstApply = new Promise((resolve) => {
+      resolveFirst = resolve;
+    });
+    let applyTail = Promise.resolve();
+    source.onChange((bundle) => {
+      applyTail = applyTail.then(async () => {
+        try {
+          const result = await this.apply(bundle);
+          if (!result.applied) {
+            this.logger.warn(`[bundle-sync] bundle ${bundle.bundleId}@${bundle.version} not applied: ${result.reason}`);
+          }
+        } catch (e) {
+          this.logger.error(
+            `[bundle-sync] bundle ${bundle.bundleId}@${bundle.version} apply threw: ${e.message}`
+          );
+        }
+      });
+      if (!firstSettled) {
+        firstSettled = true;
+        void applyTail.then(() => resolveFirst());
+      }
+    });
+    try {
+      await source.start();
+      if (firstSettled) await firstApply;
+    } catch (e) {
+      this.logger.error(`[skilled-openapi] initial bundle sync failed: ${e.message}`);
+    }
+  }
   /**
    * Validate signature and apply the bundle. Returns a structured result;
    * never throws on validation/registration failure (caller logs + ignores).
@@ -612,7 +684,7 @@ var loadSkillOutputSchema = {
 // plugins/plugin-skilled-openapi/src/tools/load-skill.tool.ts
 var LoadSkillTool = class extends ToolContext {
   async execute(input) {
-    this.get(BundleSyncService);
+    await this.get(BundleSyncService).ensureReady();
     const scope = this.get(ScopeEntry);
     const skillRegistry = scope.skills;
     if (!skillRegistry) {
@@ -1411,7 +1483,7 @@ var MAX_TOOL_CALLS = 25;
 var TIMEOUT_MS = 8e3;
 var RunWorkflowTool = class extends ToolContext2 {
   async execute(input) {
-    this.get(BundleSyncService);
+    await this.get(BundleSyncService).ensureReady();
     const config = this.get(SkilledOpenApiConfig);
     const hiddenOps = this.get(HiddenOpRegistry);
     const guard = this.get(AuthorityGuard);
@@ -1438,7 +1510,9 @@ var RunWorkflowTool = class extends ToolContext2 {
     const toolHandler = async (actionId, actionInput) => {
       const entry = hiddenOps.getByActionId(actionId);
       if (!entry) {
-        throw new Error(`unknown action "${actionId}" \u2014 run search_skill then load_skill to discover available actions`);
+        throw new Error(
+          `unknown action "${actionId}" \u2014 run search_skill then load_skill to discover available actions`
+        );
       }
       const res = await executeSkillAction({ entry, input: actionInput ?? {}, authInfo: this.authInfo, deps });
       if (!res.ok) {
@@ -1450,7 +1524,10 @@ var RunWorkflowTool = class extends ToolContext2 {
     try {
       transformed = transformAgentScript(input.script, { transformLoops: false });
     } catch (error) {
-      return { success: false, error: `AgentScript rejected: ${error instanceof Error ? error.message : String(error)}` };
+      return {
+        success: false,
+        error: `AgentScript rejected: ${error instanceof Error ? error.message : String(error)}`
+      };
     }
     const adapter = new InterpreterAdapter({ maxSteps: MAX_STEPS });
     const context = {
@@ -1486,9 +1563,6 @@ RunWorkflowTool = __decorateClass([
   })
 ], RunWorkflowTool);
 
-// plugins/plugin-skilled-openapi/src/tools/search-skill.tool.ts
-import { ScopeEntry as ScopeEntry2, Tool as Tool3, ToolContext as ToolContext3 } from "@frontmcp/sdk";
-
 // plugins/plugin-skilled-openapi/src/tools/search-skill.schema.ts
 import { z as z5 } from "@frontmcp/lazy-zod";
 var searchSkillDescription = `Search the available skills by free-form query.
@@ -1530,9 +1604,10 @@ var searchSkillOutputSchema = {
 };
 
 // plugins/plugin-skilled-openapi/src/tools/search-skill.tool.ts
+import { ScopeEntry as ScopeEntry2, Tool as Tool3, ToolContext as ToolContext3 } from "@frontmcp/sdk";
 var SearchSkillTool = class extends ToolContext3 {
   async execute(input) {
-    this.get(BundleSyncService);
+    await this.get(BundleSyncService).ensureReady();
     const scope = this.get(ScopeEntry2);
     const skillRegistry = scope.skills;
     if (!skillRegistry || !skillRegistry.hasAny()) {
@@ -1620,7 +1695,7 @@ var SkilledOpenApiPlugin = class extends DynamicPlugin {
     const target = tools.find((item) => item.tool?.metadata?.name === "search_skill");
     if (!target) return;
     try {
-      this.get(BundleSyncService);
+      await this.get(BundleSyncService).ensureReady();
     } catch {
     }
     const scope = this.get(ScopeEntry3);
@@ -1746,21 +1821,12 @@ ${catalog}` : searchSkillDescription;
               logger.warn(`runtime-deps attach threw: ${e.message}`);
             }
           }
-          source.onChange((bundle) => {
-            void sync.apply(bundle).then((result) => {
-              if (!result.applied) {
-                logger.warn(`bundle ${bundle.bundleId}@${bundle.version} not applied: ${result.reason}`);
-              }
-            }).catch((e) => {
-              logger.error(`bundle ${bundle.bundleId}@${bundle.version} apply threw: ${e.message}`);
+          sync.attachSource(source);
+          if (!runtimeDeps?.disablePolling) {
+            setImmediate(() => {
+              void sync.ensureReady();
             });
-          });
-          const startedSource = source;
-          setImmediate(() => {
-            startedSource.start().catch((e) => {
-              logger.error(`bundle source failed to start: ${e.message}`);
-            });
-          });
+          }
           return sync;
         }
       }

package/esm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-skilled-openapi",
-  "version": "1.5.0",
+  "version": "1.5.2",
   "description": "FrontMCP plugin: serve a customer's OpenAPI spec as skill bundles (signed, OpenAPI-Overlay-based) with hidden per-operation tools mediated by three meta-tools (search_skill / load_skill / run_workflow — the last runs an enclave-sandboxed AgentScript that orchestrates the loaded skills' operations).",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -48,14 +48,14 @@
     }
   },
   "dependencies": {
-    "@frontmcp/adapters": "1.5.0",
-    "@frontmcp/auth": "1.5.0",
-    "@frontmcp/sdk": "1.5.0"
+    "@frontmcp/adapters": "1.5.2",
+    "@frontmcp/auth": "1.5.2",
+    "@frontmcp/sdk": "1.5.2"
   },
   "peerDependencies": {
     "@enclave-vm/ast": "*",
     "@enclave-vm/core": "*",
-    "@frontmcp/lazy-zod": "1.5.0"
+    "@frontmcp/lazy-zod": "1.5.2"
   },
   "peerDependenciesMeta": {
     "@enclave-vm/ast": {

package/index.js

@@ -359,6 +359,78 @@ var BundleSyncService = class {
   logger;
   operationToolFactory;
   skillUnregisterByBundleId = /* @__PURE__ */ new Map();
+  /** The configured bundle source; wired by the DI factory via {@link attachSource}. */
+  source;
+  readyPromise;
+  /**
+   * Wired by the plugin's DI factory. Stores the bundle source so {@link
+   * ensureReady} can start it and await the first apply lazily, inside the
+   * request that needs the catalog. Does NOT start the source — see the context
+   * note on {@link bootstrap}.
+   */
+  attachSource(source) {
+    this.source = source;
+  }
+  /**
+   * Ensure the source has started and its FIRST bundle has been applied, so
+   * `scope.skills` and the hidden-op registry are populated before a meta-tool
+   * (search_skill / load_skill / run_workflow) reads them. Memoized — the
+   * underlying start + apply runs at most once per service instance.
+   */
+  async ensureReady() {
+    if (!this.source) return;
+    this.readyPromise ??= this.bootstrap(this.source);
+    return this.readyPromise;
+  }
+  /**
+   * Start the source and await its FIRST bundle apply.
+   *
+   * CRITICAL — every promise here (the `apply()`, the `firstApply` latch, and
+   * the `onChange` wiring) is created inside the FIRST caller's context, which
+   * is a request context (the meta-tools / list-tools hook call `ensureReady()`
+   * while handling a request). On a stateless V8-isolate runtime (Cloudflare
+   * Workers) this is mandatory two ways over:
+   *   1. workerd cancels promise continuations that cross a request boundary, so
+   *      a `firstApply` created in the scope-init/factory context would never
+   *      resolve when awaited from a later request — it must be created here.
+   *   2. There is no background event loop, so a deferred/fire-and-forget apply
+   *      (the old `setImmediate(source.start())`) can never complete after the
+   *      response is sent — the awaiting tool drives it to completion inline.
+   * A failed first sync is swallowed (logged) so it degrades to "no skills"
+   * instead of hanging or 500-ing every call.
+   */
+  async bootstrap(source) {
+    let resolveFirst;
+    let firstSettled = false;
+    const firstApply = new Promise((resolve) => {
+      resolveFirst = resolve;
+    });
+    let applyTail = Promise.resolve();
+    source.onChange((bundle) => {
+      applyTail = applyTail.then(async () => {
+        try {
+          const result = await this.apply(bundle);
+          if (!result.applied) {
+            this.logger.warn(`[bundle-sync] bundle ${bundle.bundleId}@${bundle.version} not applied: ${result.reason}`);
+          }
+        } catch (e) {
+          this.logger.error(
+            `[bundle-sync] bundle ${bundle.bundleId}@${bundle.version} apply threw: ${e.message}`
+          );
+        }
+      });
+      if (!firstSettled) {
+        firstSettled = true;
+        void applyTail.then(() => resolveFirst());
+      }
+    });
+    try {
+      await source.start();
+      if (firstSettled) await firstApply;
+    } catch (e) {
+      this.logger.error(`[skilled-openapi] initial bundle sync failed: ${e.message}`);
+    }
+  }
   /**
    * Validate signature and apply the bundle. Returns a structured result;
    * never throws on validation/registration failure (caller logs + ignores).
@@ -621,7 +693,7 @@ var loadSkillOutputSchema = {
 // plugins/plugin-skilled-openapi/src/tools/load-skill.tool.ts
 var LoadSkillTool = class extends import_sdk.ToolContext {
   async execute(input) {
-    this.get(BundleSyncService);
+    await this.get(BundleSyncService).ensureReady();
     const scope = this.get(import_sdk.ScopeEntry);
     const skillRegistry = scope.skills;
     if (!skillRegistry) {
@@ -1414,7 +1486,7 @@ var MAX_TOOL_CALLS = 25;
 var TIMEOUT_MS = 8e3;
 var RunWorkflowTool = class extends import_sdk3.ToolContext {
   async execute(input) {
-    this.get(BundleSyncService);
+    await this.get(BundleSyncService).ensureReady();
     const config = this.get(SkilledOpenApiConfig);
     const hiddenOps = this.get(HiddenOpRegistry);
     const guard = this.get(AuthorityGuard);
@@ -1441,7 +1513,9 @@ var RunWorkflowTool = class extends import_sdk3.ToolContext {
     const toolHandler = async (actionId, actionInput) => {
       const entry = hiddenOps.getByActionId(actionId);
       if (!entry) {
-        throw new Error(`unknown action "${actionId}" \u2014 run search_skill then load_skill to discover available actions`);
+        throw new Error(
+          `unknown action "${actionId}" \u2014 run search_skill then load_skill to discover available actions`
+        );
       }
       const res = await executeSkillAction({ entry, input: actionInput ?? {}, authInfo: this.authInfo, deps });
       if (!res.ok) {
@@ -1453,7 +1527,10 @@ var RunWorkflowTool = class extends import_sdk3.ToolContext {
     try {
       transformed = transformAgentScript(input.script, { transformLoops: false });
     } catch (error) {
-      return { success: false, error: `AgentScript rejected: ${error instanceof Error ? error.message : String(error)}` };
+      return {
+        success: false,
+        error: `AgentScript rejected: ${error instanceof Error ? error.message : String(error)}`
+      };
     }
     const adapter = new InterpreterAdapter({ maxSteps: MAX_STEPS });
     const context = {
@@ -1489,9 +1566,6 @@ RunWorkflowTool = __decorateClass([
   })
 ], RunWorkflowTool);
 
-// plugins/plugin-skilled-openapi/src/tools/search-skill.tool.ts
-var import_sdk4 = require("@frontmcp/sdk");
-
 // plugins/plugin-skilled-openapi/src/tools/search-skill.schema.ts
 var import_lazy_zod5 = require("@frontmcp/lazy-zod");
 var searchSkillDescription = `Search the available skills by free-form query.
@@ -1533,9 +1607,10 @@ var searchSkillOutputSchema = {
 };
 
 // plugins/plugin-skilled-openapi/src/tools/search-skill.tool.ts
+var import_sdk4 = require("@frontmcp/sdk");
 var SearchSkillTool = class extends import_sdk4.ToolContext {
   async execute(input) {
-    this.get(BundleSyncService);
+    await this.get(BundleSyncService).ensureReady();
     const scope = this.get(import_sdk4.ScopeEntry);
     const skillRegistry = scope.skills;
     if (!skillRegistry || !skillRegistry.hasAny()) {
@@ -1623,7 +1698,7 @@ var SkilledOpenApiPlugin = class extends import_sdk5.DynamicPlugin {
     const target = tools.find((item) => item.tool?.metadata?.name === "search_skill");
     if (!target) return;
     try {
-      this.get(BundleSyncService);
+      await this.get(BundleSyncService).ensureReady();
     } catch {
     }
     const scope = this.get(import_sdk5.ScopeEntry);
@@ -1749,21 +1824,12 @@ ${catalog}` : searchSkillDescription;
               logger.warn(`runtime-deps attach threw: ${e.message}`);
             }
           }
-          source.onChange((bundle) => {
-            void sync.apply(bundle).then((result) => {
-              if (!result.applied) {
-                logger.warn(`bundle ${bundle.bundleId}@${bundle.version} not applied: ${result.reason}`);
-              }
-            }).catch((e) => {
-              logger.error(`bundle ${bundle.bundleId}@${bundle.version} apply threw: ${e.message}`);
+          sync.attachSource(source);
+          if (!runtimeDeps?.disablePolling) {
+            setImmediate(() => {
+              void sync.ensureReady();
             });
-          });
-          const startedSource = source;
-          setImmediate(() => {
-            startedSource.start().catch((e) => {
-              logger.error(`bundle source failed to start: ${e.message}`);
-            });
-          });
+          }
           return sync;
         }
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-skilled-openapi",
-  "version": "1.5.0",
+  "version": "1.5.2",
   "description": "FrontMCP plugin: serve a customer's OpenAPI spec as skill bundles (signed, OpenAPI-Overlay-based) with hidden per-operation tools mediated by three meta-tools (search_skill / load_skill / run_workflow — the last runs an enclave-sandboxed AgentScript that orchestrates the loaded skills' operations).",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -48,14 +48,14 @@
     }
   },
   "dependencies": {
-    "@frontmcp/adapters": "1.5.0",
-    "@frontmcp/auth": "1.5.0",
-    "@frontmcp/sdk": "1.5.0"
+    "@frontmcp/adapters": "1.5.2",
+    "@frontmcp/auth": "1.5.2",
+    "@frontmcp/sdk": "1.5.2"
   },
   "peerDependencies": {
     "@enclave-vm/ast": "*",
     "@enclave-vm/core": "*",
-    "@frontmcp/lazy-zod": "1.5.0"
+    "@frontmcp/lazy-zod": "1.5.2"
   },
   "peerDependenciesMeta": {
     "@enclave-vm/ast": {

package/skilled-openapi.plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skilled-openapi.plugin.d.ts","sourceRoot":"","sources":["../src/skilled-openapi.plugin.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,gBAAgB,EAIrB,KAAK,iBAAiB,EACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,aAAa,EAMb,KAAK,SAAS,EAEd,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAMvB,OAAO,EAEL,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACtC,MAAM,yBAAyB,CAAC;AAmBjC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kCAAkC,eAAsD,CAAC;AAEtG;;;;;GAKG;AACH,MAAM,WAAW,yBAA0B,SAAQ,gBAAgB;IACjE;;;;OAIG;IACH,MAAM,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAC1C;AAqDD;;;;;;;;;;;;GAYG;AAQH,MAAM,CAAC,OAAO,OAAO,oBAAqB,SAAQ,aAAa,CAC7D,2BAA2B,EAC3B,gCAAgC,CACjC;IACC,OAAO,EAAE,2BAA2B,CAAC;IACrC,OAAO,CAAC,YAAY,CAAC,CAAiB;gBAE1B,OAAO,EAAE,gCAAgC;IAMrD,OAAO,CAAC,SAAS;IAOjB;;;;;;;;;;OAUG;IAEG,gCAAgC,CAAC,OAAO,EAAE,SAAS,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB7F,OAAO,CAAC,oBAAoB;WAaZ,gBAAgB,CAAC,OAAO,EAAE,gCAAgC,GAAG,YAAY,EAAE;CAsJ5F"}
+{"version":3,"file":"skilled-openapi.plugin.d.ts","sourceRoot":"","sources":["../src/skilled-openapi.plugin.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,gBAAgB,EAIrB,KAAK,iBAAiB,EACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,aAAa,EAKb,KAAK,SAAS,EAEd,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAMvB,OAAO,EAEL,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACtC,MAAM,yBAAyB,CAAC;AAmBjC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kCAAkC,eAAsD,CAAC;AAEtG;;;;;GAKG;AACH,MAAM,WAAW,yBAA0B,SAAQ,gBAAgB;IACjE;;;;OAIG;IACH,MAAM,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAC1C;AAqDD;;;;;;;;;;;;GAYG;AAQH,MAAM,CAAC,OAAO,OAAO,oBAAqB,SAAQ,aAAa,CAC7D,2BAA2B,EAC3B,gCAAgC,CACjC;IACC,OAAO,EAAE,2BAA2B,CAAC;IACrC,OAAO,CAAC,YAAY,CAAC,CAAiB;gBAE1B,OAAO,EAAE,gCAAgC;IAMrD,OAAO,CAAC,SAAS;IAOjB;;;;;;;;;;OAUG;IAEG,gCAAgC,CAAC,OAAO,EAAE,SAAS,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB7F,OAAO,CAAC,oBAAoB;WAaZ,gBAAgB,CAAC,OAAO,EAAE,gCAAgC,GAAG,YAAY,EAAE;CA0J5F"}

package/sync/bundle-sync.service.d.ts

@@ -46,6 +46,11 @@ export interface BundleApplyResult {
  * Listeners can subscribe via the underlying BundleStore for downstream
  * effects (audit log, OTel attributes, /healthz updates).
  */
+/** Minimal slice of a bundle source that {@link BundleSyncService} drives. */
+interface StartableBundleSource {
+    start(): Promise<void>;
+    onChange(listener: (bundle: ResolvedBundle) => void): () => void;
+}
 export declare class BundleSyncService {
     private readonly skillRegistry;
     private readonly hiddenOps;
@@ -61,6 +66,9 @@ export declare class BundleSyncService {
      */
     private readonly operationToolFactory?;
     private skillUnregisterByBundleId;
+    /** The configured bundle source; wired by the DI factory via {@link attachSource}. */
+    private source?;
+    private readyPromise?;
     constructor(skillRegistry: SkillRegistryInterface, hiddenOps: HiddenOpRegistry, bundleStore: BundleStore, options: BundleSyncOptions, logger: FrontMcpLogger, 
     /**
      * Optional factory that registers each operation as an internal SDK tool.
@@ -70,6 +78,38 @@ export declare class BundleSyncService {
      * tool registry (e.g. unit tests for the sync service in isolation).
      */
     operationToolFactory?: OperationToolFactory | undefined);
+    /**
+     * Wired by the plugin's DI factory. Stores the bundle source so {@link
+     * ensureReady} can start it and await the first apply lazily, inside the
+     * request that needs the catalog. Does NOT start the source — see the context
+     * note on {@link bootstrap}.
+     */
+    attachSource(source: StartableBundleSource): void;
+    /**
+     * Ensure the source has started and its FIRST bundle has been applied, so
+     * `scope.skills` and the hidden-op registry are populated before a meta-tool
+     * (search_skill / load_skill / run_workflow) reads them. Memoized — the
+     * underlying start + apply runs at most once per service instance.
+     */
+    ensureReady(): Promise<void>;
+    /**
+     * Start the source and await its FIRST bundle apply.
+     *
+     * CRITICAL — every promise here (the `apply()`, the `firstApply` latch, and
+     * the `onChange` wiring) is created inside the FIRST caller's context, which
+     * is a request context (the meta-tools / list-tools hook call `ensureReady()`
+     * while handling a request). On a stateless V8-isolate runtime (Cloudflare
+     * Workers) this is mandatory two ways over:
+     *   1. workerd cancels promise continuations that cross a request boundary, so
+     *      a `firstApply` created in the scope-init/factory context would never
+     *      resolve when awaited from a later request — it must be created here.
+     *   2. There is no background event loop, so a deferred/fire-and-forget apply
+     *      (the old `setImmediate(source.start())`) can never complete after the
+     *      response is sent — the awaiting tool drives it to completion inline.
+     * A failed first sync is swallowed (logged) so it degrades to "no skills"
+     * instead of hanging or 500-ing every call.
+     */
+    private bootstrap;
     /**
      * Validate signature and apply the bundle. Returns a structured result;
      * never throws on validation/registration failure (caller logs + ignores).
@@ -84,4 +124,5 @@ export declare class BundleSyncService {
     private toSkillContent;
     private rebuildHiddenOps;
 }
+export {};
 //# sourceMappingURL=bundle-sync.service.d.ts.map

package/sync/bundle-sync.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bundle-sync.service.d.ts","sourceRoot":"","sources":["../../src/sync/bundle-sync.service.ts"],"names":[],"mappings":"AAEA,OAAO,EASL,KAAK,UAAU,EACf,KAAK,WAAW,EAEhB,KAAK,cAAc,EAEnB,KAAK,wBAAwB,EAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,KAAK,cAAc,EAAqB,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEpG,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC3F,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,WAAW,EAAE,YAAY,EAAE,CAAC;IAC5B;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC;;;;;;;;OAQG;IACH,+BAA+B,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iBAAiB;IAI1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAfxC,OAAO,CAAC,yBAAyB,CAA0C;gBAGxD,aAAa,EAAE,sBAAsB,EACrC,SAAS,EAAE,gBAAgB,EAC3B,WAAW,EAAE,WAAW,EACxB,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,cAAc;IACvC;;;;;;OAMG;IACc,oBAAoB,CAAC,EAAE,oBAAoB,YAAA;IAG9D;;;;OAIG;IACG,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA0O/D;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,gBAAgB;CAwCzB"}
+{"version":3,"file":"bundle-sync.service.d.ts","sourceRoot":"","sources":["../../src/sync/bundle-sync.service.ts"],"names":[],"mappings":"AAEA,OAAO,EASL,KAAK,UAAU,EACf,KAAK,WAAW,EAEhB,KAAK,cAAc,EAEnB,KAAK,wBAAwB,EAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,KAAK,cAAc,EAAqB,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEpG,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAC3F,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,WAAW,EAAE,YAAY,EAAE,CAAC;IAC5B;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC;;;;;;;;OAQG;IACH,+BAA+B,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED;;;;;;;;;;;;GAYG;AACH,8EAA8E;AAC9E,UAAU,qBAAqB;IAC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAClE;AAED,qBAAa,iBAAiB;IAQ1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAnBxC,OAAO,CAAC,yBAAyB,CAA0C;IAE3E,sFAAsF;IACtF,OAAO,CAAC,MAAM,CAAC,CAAwB;IACvC,OAAO,CAAC,YAAY,CAAC,CAAgB;gBAGlB,aAAa,EAAE,sBAAsB,EACrC,SAAS,EAAE,gBAAgB,EAC3B,WAAW,EAAE,WAAW,EACxB,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,cAAc;IACvC;;;;;;OAMG;IACc,oBAAoB,CAAC,EAAE,oBAAoB,YAAA;IAG9D;;;;;OAKG;IACH,YAAY,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI;IAIjD;;;;;OAKG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAMlC;;;;;;;;;;;;;;;;OAgBG;YACW,SAAS;IA+CvB;;;;OAIG;IACG,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA0O/D;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,gBAAgB;CAwCzB"}

package/tools/load-skill.tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"load-skill.tool.d.ts","sourceRoot":"","sources":["../../src/tools/load-skill.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsD,WAAW,EAAE,MAAM,eAAe,CAAC;AAGhG,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,qBAAqB,CAAC;AAY7B,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,WAAW;IAC9C,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;CA8B/D"}
+{"version":3,"file":"load-skill.tool.d.ts","sourceRoot":"","sources":["../../src/tools/load-skill.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsD,WAAW,EAAE,MAAM,eAAe,CAAC;AAGhG,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,qBAAqB,CAAC;AAY7B,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,WAAW;IAC9C,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;CAgC/D"}

package/tools/run-workflow.tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-workflow.tool.d.ts","sourceRoot":"","sources":["../../src/tools/run-workflow.tool.ts"],"names":[],"mappings":"AAUA,OAAO,EAAQ,WAAW,EAAE,MAAM,eAAe,CAAC;AAOlD,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAkB/B,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IAChD,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAmFnE"}
+{"version":3,"file":"run-workflow.tool.d.ts","sourceRoot":"","sources":["../../src/tools/run-workflow.tool.ts"],"names":[],"mappings":"AAUA,OAAO,EAAQ,WAAW,EAAE,MAAM,eAAe,CAAC;AAOlD,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAkB/B,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IAChD,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA0FnE"}

package/tools/search-skill.tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search-skill.tool.d.ts","sourceRoot":"","sources":["../../src/tools/search-skill.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoB,WAAW,EAAE,MAAM,eAAe,CAAC;AAG9D,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAY/B,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IAChD,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAiCnE"}
+{"version":3,"file":"search-skill.tool.d.ts","sourceRoot":"","sources":["../../src/tools/search-skill.tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoB,WAAW,EAAE,MAAM,eAAe,CAAC;AAG9D,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAY/B,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,WAAW;IAChD,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAkCnE"}